
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d685b144-01da-4b41-857c-d596807b04bd.roa
File: d685b144-01da-4b41-857c-d596807b04bd.roa (raw, json)
Hash identifier: IVARC9QDgURP6jHQm7iRkdQt2Lp7afA+MDzxePkxrJY=
Subject key identifier: E3:20:11:5D:62:3E:EE:38:25:65:B8:4F:D5:BA:A1:84:07:60:68:2E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52BF0E7698F0088E973EC6074A51360FF7D60EA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d685b144-01da-4b41-857c-d596807b04bd.roa
Signing time: Sun 01 Mar 2026 00:21:45 +0000
ROA not before: Sun 01 Mar 2026 00:21:45 +0000
ROA not after: Sat 30 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bf:0e:76:98:f0:08:8e:97:3e:c6:07:4a:51:36:0f:f7:d6:0e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 1 00:21:45 2026 GMT
Not After : May 30 23:59:59 2026 GMT
Subject: serialNumber=5a93f2af40d20fdd0337f2825565b84517e61d3d7bd5c6e5b9f3bf563f976134, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:20:f7:ca:98:f5:6c:49:1e:51:59:90:e3:6e:
c6:9a:8d:70:46:80:43:1a:ca:b7:a6:54:01:d1:6c:
67:6f:ec:d7:ae:03:dc:14:71:e7:b5:79:24:94:44:
61:96:ad:46:61:3b:e9:47:33:96:ae:d1:56:dd:3c:
c8:60:e1:4f:57:27:27:ec:83:74:f6:f2:c1:41:3e:
44:ff:b1:e5:f1:2d:a9:aa:25:6c:25:27:6e:d3:ef:
2e:4b:14:56:16:a7:fe:91:53:37:5f:f2:55:a8:22:
60:8f:a6:06:ec:3f:03:80:bd:7b:a7:69:80:fb:53:
99:df:df:b9:37:5b:6d:9a:e1:57:13:b3:ee:90:e0:
8f:0f:f8:1f:b9:5d:22:d5:8a:e4:87:2e:df:d8:f3:
25:03:5b:f5:a3:80:e1:21:9a:16:bb:5b:c8:48:39:
b1:98:dc:c0:4f:75:7f:4f:0f:c2:9d:f5:82:7b:32:
a3:ee:fe:b3:7c:6b:b8:c4:fa:ce:f7:6b:3f:e1:ca:
c4:ef:a3:9e:ab:74:da:42:70:35:03:e6:a3:9e:6c:
29:b7:48:d3:73:e0:45:ca:ae:de:4b:2c:cf:3c:f6:
0a:73:a2:13:07:ed:e1:3a:ff:66:28:88:fa:d0:f6:
bf:0f:21:cf:9a:22:04:0b:f7:1a:d9:0b:ae:8c:1e:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:20:11:5D:62:3E:EE:38:25:65:B8:4F:D5:BA:A1:84:07:60:68:2E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d685b144-01da-4b41-857c-d596807b04bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:4080::/46
Signature Algorithm: sha256WithRSAEncryption
b2:bd:57:b2:e4:ac:ef:b2:07:92:77:63:9c:b0:45:3c:1e:69:
f3:05:15:0e:d3:7c:a9:92:88:47:a9:69:bc:61:c1:d6:53:89:
a5:10:f2:f0:f2:4f:a1:05:cd:22:d6:d5:a7:81:70:eb:47:24:
06:58:1a:79:27:ee:d0:2d:64:d8:9f:23:9f:ac:b9:15:69:9e:
51:c5:21:80:86:97:25:cd:1e:5c:d7:23:17:ec:57:3b:6e:b2:
0b:30:31:0b:91:f3:1d:34:66:97:b5:9f:c7:95:27:89:7f:14:
a5:1e:c2:d3:0e:33:5b:24:67:09:96:ab:fb:b7:1d:60:f8:88:
65:5a:93:d1:38:54:8b:7b:30:c3:7a:fe:17:62:f7:9d:8a:14:
05:e2:64:8f:d9:60:d3:f2:80:03:19:d7:ca:3f:86:66:bc:13:
10:8e:5f:75:bb:9a:12:b9:dc:c0:54:0d:58:65:dc:89:b3:42:
d9:47:bc:f0:93:76:81:bb:a4:4f:17:c5:29:18:d6:3e:03:7b:
c5:3a:7a:1f:c0:3a:37:8a:f0:89:8e:e3:aa:e4:06:21:05:09:
7b:07:b0:a0:12:e2:98:b3:f9:ea:56:70:a1:12:e8:86:1c:70:
6a:4d:ef:54:4d:1c:b3:82:0b:7e:c6:26:46:1d:b2:92:f4:f9:
29:d1:c1:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:49 2026 by rpki-client